Can I read An attack scenario and mitigation mechanism for enterprise BYOD environments on EtoBox?

An attack scenario and mitigation mechanism for enterprise BYOD environments by Shachar Siboni; Asaf Shabtai; Yuval Elovici is a Computer Science article available to read on EtoBox.

What is An attack scenario and mitigation mechanism for enterprise BYOD environments about?

The recent proliferation of the Internet of Things (IoT) technology poses major security and privacy concerns. Specifically, the use of personal IoT devices, such as tablets, smartphones, and even smartwatches, as part of the Bring Your Own Device (BYOD) trend, may result in severe network security breaches in enterprise environments. Such devices increase the attack surface by weakening the digital perimeter of the enterprise network and opening new points of entry for malicious activities. In this paper we demonstrate a novel attack scenario in an enterprise environment by exploiting the smartwatch device of an innocent employee. Using a malicious application running on a suitable smartwatch, the device imitates a real Wi-Fi direct printer service in the network. Using this attack scenario, we illustrate how an advanced attacker located outside of the organization can leak/steal sensitive information from the organization by utilizing the compromised smartwatch as a means of attack. An attack mitigation process and countermeasures are suggested in order to limit the capability of the remote attacker to execute the attack on the network, thus minimizing the data leakage by the sma

Who reads An attack scenario and mitigation mechanism for enterprise BYOD environments?

Author

Shachar Siboni; Asaf Shabtai; Yuval Elovici

Publisher

ACM

Published

2018

Language

EN

Field

Computer Science (Physical Sciences)